feat: add general access enum to consts (#507)

We plan to allow users to configure through API & clients how their
storages and runs can be accessed — whether just the ID / name is
sufficient to access the storage. Full context in
apify/apify-core#19012.

This PR adds appropriate enums that will be used both externally (in
clients & API), and internally (where it will replace the
[existing](https://github.com/apify/apify-core/blob/ba052eedd7490952fa1b8c1447c261a9cfd3acb3/src/packages/consts/src/iam.ts#L101)
enum).

Note that there are separate enums for runs and storages as only
storages support access by name. So far we have been using a shared enum
for both, but it's cleaner to have them separated — in run related logic
& documentation we won't have to account (much) for the unsupported
value.

---------

Co-authored-by: Martin Adámek <banan23@gmail.com>

Author: tobice

packages/consts/src/consts.ts

@@ -1,3 +1,4 @@
+import type { ValueOf } from './helpers';
 import { DNS_SAFE_NAME_REGEX, EMAIL_REGEX } from './regexs';
 
 export const FREE_SUBSCRIPTION_PLAN_CODE = 'DEV';
@@ -631,3 +632,40 @@ export const ISSUES_STATUS_TYPES = {
  * This is used for filtering issues. All issue types to be considered.
  */
 export const ISSUES_STATUS_ALL = 'ALL';
+
+/**
+ * Storage setting determining how others can access the storage.
+ *
+ * This setting overrides the user setting of the storage owner.
+ */
+export const STORAGE_GENERAL_ACCESS = {
+    // Empty / not populated: Follow the user setting.
+
+    /** Only signed-in users with explicit access can read this storage. */
+    RESTRICTED: 'RESTRICTED',
+
+    /** Anyone with a link, or the unique storage ID, can read the storage. */
+    ANYONE_WITH_ID_CAN_READ: 'ANYONE_WITH_ID_CAN_READ',
+
+    /** Anyone with a link, the unique storage ID, or the storage name, can read the storage. */
+    ANYONE_WITH_NAME_CAN_READ: 'ANYONE_WITH_NAME_CAN_READ',
+} as const;
+
+export type STORAGE_GENERAL_ACCESS = ValueOf<typeof STORAGE_GENERAL_ACCESS>
+
+/**
+ * Run setting determining how others can access the run.
+ *
+ * This setting overrides the user setting of the run owner.
+ */
+export const RUN_GENERAL_ACCESS = {
+    // Empty / not populated: Follow the user setting.
+
+    /** Only signed-in users with explicit access can read this run. */
+    RESTRICTED: 'RESTRICTED',
+
+    /** Anyone with a link, or the unique run ID, can read the run. */
+    ANYONE_WITH_ID_CAN_READ: 'ANYONE_WITH_ID_CAN_READ',
+} as const;
+
+export type RUN_GENERAL_ACCESS = ValueOf<typeof RUN_GENERAL_ACCESS>

packages/consts/src/helpers.ts

@@ -0,0 +1 @@
+export type ValueOf<T> = T[keyof T];

packages/consts/src/index.ts

@@ -1,2 +1,3 @@
 export * from './consts';
+export * from './helpers';
 export * from './regexs';